Architects frequently use diagrams to communicate complex systems to stakeholders and implementers effectively. These diagrams can represent the overall vision or dive into detailed aspects of a system. To communicate effectively, architects must choose the appropriate diagram type for the specific context.
Azure AD Access Reviews help you manage group memberships, access to enterprise applications, and role assignments. They enable you to ensure that only the right people have access to resources, improving security and compliance.
Azure AD Application Proxy enables secure remote access to on-premises web applications by leveraging Azure Active Directory. It provides seamless single sign-on (SSO) and conditional access policies to ensure secure and convenient access to corporate resources.
Azure AD Conditional Access is a tool used by Azure Active Directory to enforce access controls to your applications based on specific conditions. It allows you to create policies that provide a secure access environment by assessing signals such as user location, device state, and risk levels.
Azure AD Connect is a tool that connects your on-premises directories with Azure Active Directory. It enables hybrid identity by synchronizing user accounts, groups, and other directory objects, providing a common identity for accessing both cloud and on-premises resources.
Azure AD Enterprise Applications allow organizations to manage and integrate third-party applications and custom applications with Azure Active Directory for centralized access management, single sign-on (SSO), and enhanced security features.
Azure AD Identity Protection is a tool that helps organizations protect their user identities and mitigate identity-based risks. It leverages machine learning and artificial intelligence to detect suspicious activities and provide actionable insights to address potential security threats.
Azure AD Privileged Identity Management (PIM) helps you manage, control, and monitor access within your organization. It provides just-in-time (JIT) access to resources, ensuring that users have the necessary permissions only when needed. PIM also helps in auditing and reporting access, making it easier to comply with regulatory requirements.
Azure AD Security Defaults are preconfigured security settings in Microsoft Entra ID designed to protect organizations from identity-related attacks. They provide a basic level of security at no extra cost, making it easier for organizations to secure their environments without complex configurations.
Azure AD Smart Lockout is a feature that helps protect user accounts from brute force attacks by locking out malicious attempts while allowing legitimate users to continue accessing their accounts. It uses machine learning to differentiate between real users and attackers, providing an additional layer of security.
Azure Advisor is a personalized cloud consultant that helps you follow best practices to optimize your Azure deployments. It analyzes your resource configuration and usage telemetry and then recommends solutions to improve the performance, security, reliability, and cost-effectiveness of your Azure resources.
Azure Alerts and Action Groups enable you to monitor and respond to critical conditions across your Azure resources. They help you create and manage alerts and automate actions in response to those alerts, ensuring your applications and services are running smoothly.
Azure App Service Plan provides the underlying infrastructure for hosting web apps, mobile app backends, RESTful APIs, or automated business processes. It allows you to scale your applications and manage resources efficiently.
Azure App Services is a fully managed platform for building, deploying, and scaling web apps, mobile app backends, and RESTful APIs. It provides a range of services and features to help you create and manage applications efficiently.
Azure Application Gateway is a web traffic load balancer that helps manage and optimize the delivery of web applications. It acts as an entry point for incoming traffic, distributing requests to multiple backend servers.
Azure Application Insights is a monitoring service that helps you understand the performance and usage of your applications. It provides deep diagnostics, detects and diagnoses issues, and analyzes application usage patterns to improve the overall performance and user experience.
Azure Application Proxy is a feature of Microsoft Entra ID that provides secure remote access to on-premises web applications. It allows users to access internal applications from anywhere without the need for a VPN, using a secure external URL.
Automate the management of Azure resources and send email notifications about scheduled deletions using SendGrid, utilizing a single PowerShell runbook.
Azure Availability Sets and Zones are designed to ensure high availability and fault tolerance for your applications. By distributing resources across multiple fault domains and update domains, they minimize downtime and maintain business continuity even during planned maintenance or unexpected outages.
AzCopy is a command-line utility that you can use to copy blobs or files to or from a storage account. It supports data transfer between Azure storage accounts, on-premises sources, and Azure storage, providing a flexible and efficient solution for data migration and synchronization.
Azure Backup is a cloud-based service that provides simple, secure, and cost-effective solutions to back up your data and recover it from the Microsoft Azure cloud. It supports a wide range of workloads, including Azure VMs, on-premises servers, SQL databases, and more.
Azure Bastion is a fully-managed PaaS service that provides secure and seamless RDP and SSH access to your virtual machines directly through the Azure portal, without exposing them to the public internet.
Azure Batch is a cloud-based job scheduling service that enables you to run large-scale parallel and high-performance computing (HPC) applications efficiently in the cloud. It allows you to scale your applications and manage resources effectively.
Organizations often need to process large volumes of data or perform compute-intensive tasks. This requires a scalable and efficient platform that can handle batch processing jobs, high-performance computing (HPC) applications, and parallel workloads.
Azure Blueprints is a service that enables cloud architects and central IT groups to define a repeatable set of Azure resources that adhere to an organization’s standards, patterns, and requirements. It simplifies the deployment of compliant environments by packaging artifacts such as Azure Resource Manager (ARM) templates, role-based access control (RBAC), and policies into a single blueprint definition.
Azure Cache for Redis is a fully managed, in-memory data store based on the open-source Redis software. It provides high throughput and low-latency access to data, making it ideal for applications that require fast data retrieval and processing. Azure Cache for Redis can be used for caching, session management, real-time analytics, and more.
Organizations often need to provide fast and responsive user experiences by caching frequently accessed data. This requires a scalable and efficient platform that can handle high throughput and low-latency access to data.
Azure CDN is a global solution for rapidly delivering high-bandwidth content to users by caching content at strategically placed physical nodes across the world. It improves performance, scalability, and security for web applications and content delivery.
Azure CLI (Command Line Interface) is a set of commands used to manage Azure resources directly from the command line. It provides a cross-platform command-line tool that allows users to perform tasks such as creating, managing, and deleting Azure resources from Windows, macOS, and Linux.
The Azure Cloud Adoption Framework (CAF) is a comprehensive set of tools, best practices, and documentation designed to help organizations successfully migrate to the cloud and maximize their investment in Azure. CAF provides a structured approach to planning, implementing, and managing cloud adoption initiatives, ensuring alignment with business goals and technical requirements.
Whether you’re migrating workloads, modernizing applications, or building new cloud-native solutions, the framework offers actionable guidance at every stage of your cloud journey.
Azure Compute Availability ensures that your virtual machines (VMs) and other compute resources are highly available and resilient to failures. It provides various features and services to help you achieve high availability and reliability for your applications.
Azure Container Instances (ACI) is a service that enables you to run containers in a managed, serverless environment. ACI allows you to deploy containers without managing underlying virtual machines or infrastructure, providing an efficient way to run containerized applications.
Organizations often need to deploy and manage containerized applications without the overhead of managing virtual machines or adopting higher-level services. This requires a scalable and efficient platform that can handle container orchestration and management.
Azure Container Registry is a managed, private Docker registry service that allows you to build, store, and manage container images and artifacts. It integrates seamlessly with Azure services, including Azure Kubernetes Service (AKS), Azure DevOps, and more, providing a secure and scalable solution for container lifecycle management.
Organizations often need to build, store, and manage container images efficiently. This requires a scalable and secure platform that integrates seamlessly with other Azure services and supports continuous integration and continuous delivery (CI/CD) pipelines.
Azure Cosmos DB is a fully managed, globally distributed NoSQL and relational database service designed for modern app development. It offers high performance, high availability, and support for multiple data models, making it ideal for building scalable and responsive applications.
How to create custom Azure policies to ensure your Azure resources comply with your organization’s standards and requirements. Specifically, you will create a policy that adds a “CreatedOnDate” tag to all resources with the current UTC date and time.
Azure Data Box is a cloud solution that enables you to transfer large amounts of data to and from Azure in a quick, secure, and cost-effective manner. It is ideal for scenarios with limited network connectivity or when transferring data sizes larger than 40 TB.
Azure Data Factory is a fully managed, serverless data integration service that allows you to visually integrate data sources with more than 90 built-in connectors. It simplifies the creation of ETL (Extract, Transform, Load) and ELT (Extract, Load, Transform) processes, enabling you to construct data pipelines and transform data at scale.
Azure Database Migration Service provides a comprehensive and fully managed solution for migrating databases to Azure. It enables seamless migration of SQL Server, MySQL, PostgreSQL, and other database workloads to Azure, ensuring minimal downtime and data integrity. The service supports both online and offline migrations, making it easier to modernize your database infrastructure.
Organizations often need to process, analyze, and visualize large volumes of data from various sources. This requires a scalable and efficient platform that can handle data engineering, data science, and business intelligence tasks.
Organizations often need to process, analyze, and visualize large volumes of data from various sources. This requires a scalable and efficient platform that can handle data engineering, data science, and business intelligence tasks.
Azure Enterprise Applications are pre-integrated applications available in the Microsoft Entra ID gallery. They enable organizations to manage access, single sign-on (SSO), and provisioning for a wide range of cloud and on-premises applications.
Azure Event Grid is a fully managed event routing service that enables you to build event-driven architectures with ease. It allows you to react to events in near real-time by routing them to various Azure services and custom endpoints. Event Grid supports a wide range of event sources and handlers, making it a versatile solution for building scalable and reliable applications.
Azure Event Hubs is a fully managed, real-time data ingestion service that is simple, trusted, and scalable. It can stream millions of events per second from any source to build dynamic data pipelines and respond to business challenges in real-time.
Organizations often need to process, analyze, and visualize large volumes of data from various sources. This requires a scalable and efficient platform that can handle real-time data ingestion and processing.
Azure ExpressRoute provides a dedicated private connection between your on-premises network and Azure, bypassing the public internet. This solution is ideal for enterprise-level connectivity that requires high bandwidth, low latency, and enhanced security.
Azure Fault and Update Domains are features of Azure Availability Sets that help ensure high availability and reliability for your virtual machines (VMs). Fault domains provide physical separation of VMs across different hardware to protect against hardware failures, while update domains provide logical separation to ensure that VMs are not all updated or rebooted at the same time.
Azure File Sync enables organizations to centralize their file shares in Azure Files while maintaining the flexibility, performance, and compatibility of on-premises file servers. By caching the most frequently accessed files locally and storing the rest in the cloud, Azure File Sync optimizes storage costs and enhances accessibility.
Azure Firewall is a cloud-native and intelligent network firewall security service that provides best-of-breed threat protection for your cloud workloads running in Azure. It is fully stateful with built-in high availability and unrestricted cloud scalability, offering both east-west and north-south traffic inspection.
Organizations often need to secure their network traffic to protect against threats and ensure compliance with security policies. Azure Firewall provides a scalable and efficient platform for network security.
Azure Front Door is a modern cloud content delivery network (CDN) service that delivers high performance, scalability, and secure user experiences for your content and applications. It provides global load balancing, application acceleration, and security features to ensure your applications are fast, reliable, and secure.
Azure Functions is a serverless compute service that enables you to run event-driven code without having to provision or manage infrastructure. It supports various programming languages and integrates with other Azure services, making it a flexible and scalable solution for building applications.
Organizations often need to build and deploy event-driven, scalable applications without managing the underlying infrastructure. This requires a serverless computing platform that can handle various triggers and bindings efficiently.
Azure Import/Export is a service that enables you to securely transfer large amounts of data to and from Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter. It is ideal for data migration, content distribution, backup, and data recovery scenarios.
Azure Just-In-Time (JIT) VM Access is a feature of Microsoft Defender for Cloud that helps protect your Azure virtual machines (VMs) from unauthorized network access. It allows you to lock down inbound traffic to your VMs, reducing exposure to attacks while providing easy access when needed.
Azure Key Vault is a cloud service for securely storing and accessing secrets, such as API keys, passwords, certificates, and cryptographic keys. It provides centralized management of secrets, key management, and certificate management, ensuring secure and controlled access to sensitive information.
Organizations often need to securely store and manage sensitive information such as API keys, passwords, certificates, and cryptographic keys. Azure Key Vault provides a scalable and efficient platform for centralized secret management.
Azure Kubernetes Service (AKS) is a managed Kubernetes service that simplifies the deployment, management, and operations of Kubernetes clusters. It offers built-in monitoring, scaling, and security features, making it ideal for running containerized applications at scale.
Organizations often need to deploy, manage, and scale containerized applications efficiently. This requires a scalable and reliable platform that can handle container orchestration and management.
Azure Landing Zones provide a foundational architecture to deploy and manage your Azure environment, ensuring consistency, security, and governance across your resources. They are built based on best practices and offer a scalable approach to deploying Azure services.
Azure Landing Zones are a set of guidelines, tools, and resources that help organizations establish a well-architected and secure environment in Azure. They are a critical component of the Azure Cloud Adoption Framework (CAF), providing the foundation for deploying workloads, managing resources, and implementing governance and security controls. A Landing Zone is not just a collection of infrastructure resources; it’s a blueprint for organizing Azure resources across subscriptions and regions in a scalable, secure, and compliant manner.
Azure Load Balancer provides high availability and network performance by distributing incoming traffic among multiple virtual machines (VMs). It offers load balancing for various protocols and ensures your applications are resilient and scalable.
Azure Load Balancing is a core feature of Microsoft Azure’s cloud services, designed to distribute incoming network traffic across multiple resources, such as virtual machines (VMs) or containers. This ensures high availability, scalability, and fault tolerance for applications hosted in the Azure cloud.
Load balancing helps you handle traffic efficiently, improve application performance, and maintain reliability even during failures or traffic spikes.
Azure Log Analytics Workspace is a data store that allows you to collect, analyze, and visualize log data from your Azure and non-Azure resources. It provides a centralized platform for monitoring, troubleshooting, and gaining insights into your infrastructure and applications.
Azure Logic Apps is a cloud platform that enables you to create and run automated workflows that integrate your apps, data, services, and systems. It provides a visual designer and prebuilt connectors to simplify the process of building workflows, making it easy to automate business processes and tasks.
Azure Managed Identities provide an automatically managed identity in Azure Active Directory for applications to use when connecting to resources that support Azure AD authentication. This eliminates the need for developers to manage credentials, enhancing security and simplifying the development process.
Azure Management Groups provide a governance scope above subscriptions, allowing you to efficiently manage access, policies, and compliance for multiple Azure subscriptions. They help you organize your resources into a hierarchy for unified policy and access management, making it easier to apply governance controls at scale.
Azure Migrate is a comprehensive service that helps you discover, assess, and migrate your on-premises workloads to Azure. It provides a unified platform for migration and modernization, offering tools and guidance to ensure a smooth transition to the cloud.
Azure Monitor is a comprehensive monitoring solution that helps you collect, analyze, and respond to telemetry data from your cloud and on-premises environments. It provides insights into the performance and health of your applications and infrastructure, enabling you to maximize availability and performance.
Azure NetApp Files is an enterprise-class, high-performance file storage service that provides scalable and flexible file shares using protocols like NFS and SMB. It supports multiple performance tiers and integrates seamlessly with Azure services, offering a robust solution for file storage needs.
Azure Network Watcher is a comprehensive network monitoring and diagnostic service that provides tools to monitor, diagnose, and gain insights into your network performance. It helps you troubleshoot network issues, monitor network security, and optimize network performance.
Azure Point-to-Site (P2S) VPN allows you to create a secure connection to your Azure virtual network from an individual client computer. It is ideal for telecommuters who need to connect to Azure virtual networks from remote locations, such as from home or a conference.
Azure Policy helps you manage and enforce organizational standards and assess compliance at-scale. It allows you to create, assign, and manage policies that enforce different rules and effects over your resources, ensuring they stay compliant with your corporate standards.
Azure Private Link provides a secure and scalable way to consume Azure services and resources over a private endpoint in your virtual network. By using Private Link, you can ensure that traffic between your virtual network and the Azure service remains on the Microsoft backbone network, reducing the risk of exposure to the public internet.
Azure Privileged Identity Management (PIM) is a service in Microsoft Entra ID that enables you to manage, control, and monitor access to important resources in your organization. It provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about.
Azure Proximity Placement Groups help improve the performance of applications by reducing latency between virtual machines. They ensure that the VMs are physically located close to each other within the Azure datacenter, thereby minimizing network latency and enhancing application performance. This feature is particularly useful for applications that require low latency and high throughput, such as high-performance computing (HPC) and financial services applications.
Azure Queue Storage is a service for storing large numbers of messages. It enables asynchronous communication between application components, providing a reliable and scalable messaging solution for cloud-based applications.
Remote connectivity enables the secure and efficient connection of on-premises networks, users, and cloud resources. It allows you to establish a reliable link between your on-premises environment and Azure, or between different Azure regions, enabling workloads to communicate seamlessly.
This document covers the types of remote connectivity methods for on-premises-to-Azure connections, single-user remote access, and the devices (appliances) that facilitate these connections. Additionally, it highlights security considerations and the impact of downtime on these remote connectivity solutions.
Azure Resource Graph helps you explore and query your Azure resources efficiently and at scale. This guide covers installation, example queries, and best practices.
Azure Resource Locks help you protect your resources from accidental deletion or modification. By applying locks, you can ensure that critical resources remain secure and unchanged unless explicitly unlocked.
Routing in Azure involves directing traffic between different Azure resources and networks using routing tables, network security groups, and routing protocols such as BGP, to optimize performance, security, and availability.
Azure Sentinel is a scalable, cloud-native security information and event management (SIEM) solution that provides intelligent security analytics and threat intelligence across the enterprise. It helps detect, investigate, and respond to threats, providing a comprehensive view of your security posture.
Organizations often need to enhance their security operations by detecting, investigating, and responding to threats in real-time. This requires a scalable and efficient platform that can handle security information and event management (SIEM) tasks.
Azure Service Bus is a fully managed enterprise message broker that ensures reliable communication and coordination between different applications and services. It provides a robust platform for asynchronous messaging, enabling decoupling and scaling of microservices and distributed systems.
Azure Service Fabric is a distributed systems platform that simplifies the packaging, deployment, and management of scalable and reliable microservices and containers. It supports both stateless and stateful microservices, providing a robust environment for building and managing cloud-native applications.
Organizations often need to build and manage scalable and reliable microservices and containers. This requires a distributed systems platform that simplifies the packaging, deployment, and management of these applications.
Azure Service Level Agreements (SLAs) define the performance standards and uptime guarantees for Azure services. They provide a commitment from Microsoft to ensure high availability and reliability for your applications and services.
Azure Service Map automatically discovers application components on Windows and Linux systems and maps the communication between services, providing detailed insights into dependencies and performance.
Azure Site Recovery helps ensure business continuity by keeping your applications running during planned and unplanned outages. It offers ease of deployment, cost-effectiveness, and dependability by replicating, failing over, and recovering processes.
This page explains how to set up a Site-to-Site VPN in Azure, enabling secure communication between your on-premises network and Azure virtual network.
Azure Spot Instances provide a cost-effective way to run workloads by taking advantage of unused capacity in Azure. They offer significant cost savings compared to pay-as-you-go prices but come with the risk of eviction when Azure needs the capacity back.
Organizations often need to run compute-intensive workloads at a lower cost. This requires a scalable and cost-effective platform that can handle interruptions and optimize resource usage.
Azure SQL is a family of fully managed, secure, and scalable database services that include Azure SQL Database, Azure SQL Managed Instance, and SQL Server on Azure Virtual Machines. It offers multiple deployment options for SQL Server workloads, providing flexibility and performance for various application needs.
Azure Always On Availability Groups provide a high availability and disaster recovery solution for SQL Server, ensuring continuous data protection and minimal downtime for your applications. They allow you to achieve high availability and load balancing for your critical databases, making it easier to manage and scale your SQL Server deployments on Azure.
TI wanted to document how this site was built, it includes some web knowledge, Terraform IaC, Azure PaaS services, DNS and custom domains, GitHub and Actions.
Azure Storage Accounts provide a scalable and secure storage solution for a variety of data types, including blobs, files, queues, and tables. They offer high availability, durability, and redundancy, making it an ideal choice for storing and accessing data in the cloud. Azure Storage Accounts also support multiple storage tiers to optimize costs and performance based on data access patterns.
Azure Storage Pools allow you to combine multiple managed disks into a single storage pool, aggregating their size and performance. This can provide performance benefits and cost savings by using multiple smaller disks instead of a single large disk. Storage Pools use simple (RAID 0) configuration and do not support parity (RAID 5).
Azure Stream Analytics provides a real-time analytics service that can process and analyze fast-moving streams of data from various sources. It is designed to handle complex event processing and can be used to derive insights and trigger actions based on streaming data. Azure Stream Analytics integrates seamlessly with other Azure services and offers a fully managed solution for real-time analytics.
An Azure subnet is a logical subdivision of an Azure virtual network used to group resources together and isolate traffic within a defined range of IP addresses.
Divide the VNet into subnets based on the type of resources they will host, such as networking, host types, or for growth. This will help to isolate and secure different types of traffic.
Azure Synapse Analytics is an enterprise analytics service that accelerates time to insight across data warehouses and big data systems. It integrates SQL technologies used in enterprise data warehousing, Spark technologies for big data, and Data Explorer for log and time series analytics, providing a unified experience for data integration, exploration, and analysis.
Organizations often need to process, analyze, and visualize large volumes of data from various sources. This requires a scalable and efficient platform that can handle data engineering, data science, and business intelligence tasks.
Azure Tags provide a way to organize and categorize Azure resources based on various criteria, enabling efficient resource management and cost tracking.
Azure Traffic Analytics is a cloud-based solution that provides visibility into your network traffic by analyzing Network Security Group (NSG) flow logs. It helps you monitor and diagnose network issues, detect security threats, and optimize network performance.
Azure Traffic Manager is a DNS-based traffic load balancer that enables you to distribute traffic to your public-facing applications across global Azure regions. It provides high availability, performance, and responsiveness by directing client requests to the most appropriate service endpoint based on traffic-routing methods.
Azure vCPU Quotas help manage the number of virtual CPUs (vCPUs) that can be used within a subscription in a specific region. They ensure that resources are allocated efficiently and prevent over-provisioning.
Azure Virtual WAN is a networking service that provides optimized and automated branch connectivity to, and through, Azure. It allows you to securely connect your branches, remote users, and cloud-based services in a unified and centralized manner.
Azure VM Extensions are small applications that provide post-deployment configuration and automation tasks on Azure virtual machines. They help you manage and maintain your VMs by automating tasks such as installing software, configuring settings, and monitoring the VM’s health.
Azure VNet Gateway enables encrypted traffic between Azure virtual networks and on-premises locations over the public Internet. It supports encrypted traffic between Azure virtual networks for secure hybrid and cloud-only environments.
Azure Web Apps is a fully managed platform as a service (PaaS) that enables you to build, deploy, and scale web applications quickly and efficiently. It supports multiple programming languages and frameworks, providing a robust environment for hosting web applications, REST APIs, and mobile back ends.
Organizations often need to build, deploy, and scale web applications quickly and efficiently. This requires a fully managed platform that supports multiple programming languages and frameworks, providing a robust environment for hosting web applications, REST APIs, and mobile back ends.
To create an Azure storage pool, you add managed disks to the VM in the Azure portal, configure the storage pool and virtual disk in Server Manager, create a volume, and expand the storage pool by adding more disks and optimizing the pool as needed.
DiskSpd is a disk performance testing tool developed by Microsoft. It’s designed to measure the performance of storage systems by simulating various types of I/O operations
Microsoft Monitoring Agent (MMA) is a versatile agent used to collect and report on data from various sources, including Azure Log Analytics and System Center Operations Manager (SCOM). It helps monitor the health and performance of your infrastructure and applications.
Power BI is a business analytics service by Microsoft that provides interactive visualizations and business intelligence capabilities with an interface simple enough for end users to create their own reports and dashboards. It connects to a wide range of data sources and helps organizations make data-driven decisions.
Microsoft System Center Data Protection Manager (DPM) is a robust enterprise backup and recovery solution that helps protect your data and ensure business continuity. It supports application-aware backups, file backups, system backups, and virtual machine backups, making it a versatile tool for comprehensive data protection.